Lucene search

MitreCVE-2001-0787

HistoryMar 09, 2002 - 5:00 a.m.

CVE-2001-0787

2002-03-0905:00:00

mitre

web.nvd.nist.gov

red hat

linux 7.0

linux 7.1

lprng

cve-2001-0787

nvd

privilege escalation

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

Percentile

0.4%

JSON

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.

Affected configurations

Nvd

Node

redhatlinuxMatch7.0

redhatlinuxMatch7.1

VendorProductVersionCPE
redhatlinux7.0cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
redhatlinux7.1cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	linux	7.0	cpe:2.3:o:redhat:linux:7.0:::::::*
redhat	linux	7.1	cpe:2.3:o:redhat:linux:7.1:::::::*

References

www.ciac.org/ciac/bulletins/l-096.shtml

www.redhat.com/support/errata/RHSA-2001-077.html

www.securityfocus.com/bid/2865

exchange.xforce.ibmcloud.com/vulnerabilities/6703

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-0787